102.158.171.15
# IP INTELLIGENCE BRIEFING
Target: 102.158.171.15/32
Date: 2026-07-25
Classification: LOW RISK / MONITOR
## EXECUTIVE SUMMARY
IP 102.158.171.15 is a Tunisian residential address associated with Ahmed Kooli under AS37705. Current risk assessment indicates LOW RISK (score 25/100) with no active threat indicators. No services detected, and the IP is currently firewalled. Historical observations show minimal threat activity with one flagged threat signal on 2026-07-25.
## NETWORK OWNERSHIP & GEOLOCATION
- ASN: 37705 (african network information center)
- Organization: Ahmed Kooli
- CIDR Block: 102.158.128.0/18
- Country: Tunisia (TN)
- City: Moknine
- Coordinates: 35.63°N, 10.91°E
- RIR: AFRINIC
## THREAT ASSESSMENT
- Risk Score: 25/100 (Low Risk)
- Abuse Confidence Score: Not available
- Blacklist Status: 0 active blacklists
- Known Attacker: No
- Tor Exit Node: No
- Spam Source: No
- DNSBL Listed: 1 of 8 lists
## NETWORK SERVICES
- Open Ports: None detected
- Services: Firewalled / No Services
- TLS Certificate: None
- HTTP Banner: None
- DNS Resolution: Not resolving to hostnames
- PTR Records: None
## OBSERVATION HISTORY
Thirteen observations recorded since 2026-07-25. Key findings:
- 2026-07-25 08:01: Subnet classified as "mostly_clean" with abuse density of 1
- 2026-07-25 07:55: Alienvault OTX signal flagged with has_threats: true, pulse count: 1
- 2026-07-25 07:56: Geolocation resolved to Tunisia (TN), ASN 37705
- Route Stability: False (BGP prefix 102.158.128.0/17)
- Threat Persistence: 0 days
- Persistent Malicious Activity: No
## RELATIONSHIPS & NEIGHBORHOOD
- Related Networks: 102.158.128.0 - 102.158.191.255 (Same Network)
- Neighborhood Subnet: 102.158.171.15/24
- Abuse Density: 0%
- Threat Siblings: 0 identified
- Total Siblings: 0 active
## RECOMMENDATIONS
1. Default Allow: Low risk profile with no active threat indicators
2. Monitoring: Continue passive monitoring; one historical threat signal detected
3. Block Criteria: Block only if new threat indicators emerge (known attacker, spam source, or blacklist additions)
4. Firewall Rules: No restrictive rules required at present
---
*Intelligence generated by IPDebrief automated analysis. Data current as of 2026-07-25.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Ahmed Kooli |
| ASN | AS37705 |
| Network Name | 102.158.128.0 - 102.158.191.255 |
| CIDR Block | 102.158.128.0/18 |
| RIR | AFRINIC |
| Country | TN |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS37705 |
| Network Prefix | 102.158.128.0/17 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 2 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 25% | 1 | 1 |
| geolocation | 25% | 1 | 1 |
| Overall | 22% | 6 | 6 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-09 07:22:45 UTC |
| Last Seen | 2026-08-27 02:22:41 UTC |
| Profile Built | 2026-08-29 06:28:58 UTC |
| Data Freshness | Live |
| Signal Types | 15 |
| Total Observations | 17 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 102.158.171.15
Who owns the IP address 102.158.171.15?
102.158.171.15 is registered to Ahmed Kooli. The address falls within the 102.158.128.0/18 network block. Registration is held at AFRINIC.
Where is 102.158.171.15 located?
Geolocation data places 102.158.171.15 in Ksar Hellal, Monastir Governorate, TN. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 102.158.171.15 malicious or safe?
102.158.171.15 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.